Privacy Policy

1. Introduction

Welcome to magichop (“we,” “our,” or “us”). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our theme park itinerary planning platform, including our website at magichop.com and related services (collectively, the “Service”).

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Profile information (such as profile picture)
• Organization details (for business accounts)
• Authentication credentials (managed securely through our authentication provider, Clerk)

2.2 Trip and Itinerary Data

To provide our itinerary planning services, we collect:

• Trip details (dates, destinations, park selections)
• Client information (names, contact details for travel agency clients)
• Itinerary preferences and customizations
• Notes, documents, and uploaded content

2.3 Payment Information

For subscription and billing purposes, payment information is collected and processed securely by our payment processor, Stripe. We do not store complete credit card numbers on our servers. We may receive limited payment information from Stripe, such as the last four digits of your card and billing address, for record-keeping purposes.

2.4 Usage and Analytics Data

We automatically collect certain information when you use our Service:

• Device information (browser type, operating system)
• IP address and approximate location
• Pages visited and features used
• Time spent on the Service
• Referring URLs

We use Vercel Analytics to collect anonymized usage data to improve our Service.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Create and manage your account and organization membership
• Generate itineraries and provide trip planning functionality
• Process payments and manage subscriptions
• Send transactional emails (account updates, billing receipts, trip shares)
• Provide customer support
• Analyze usage patterns to improve user experience and develop new features
• Protect against fraud, unauthorized access, and security threats
• Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

• Clerk - Authentication and user management
• Stripe - Payment processing
• Vercel - Hosting and analytics
• OpenAI - AI-powered features (trip planning assistance)

4.2 Organization Members

If you are part of an organization on our platform, other members of your organization may have access to trip and client data based on your organization's settings and permissions.

4.3 Shared Itineraries

When you share an itinerary with clients or collaborators, the shared content becomes accessible to those recipients via a unique link.

4.4 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication through Clerk
• Regular security assessments
• Access controls and role-based permissions

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. We may also retain certain information as required by law or for legitimate business purposes, such as resolving disputes and enforcing our agreements.

If you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data

To exercise these rights, please contact us using the information provided below.

8. Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage of our Service. Essential cookies are required for the Service to function. You can control non-essential cookies through your browser settings, though this may affect functionality.

9. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: